Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          v3MJODp+EAOVscnZ7hteGiPfT7Vgeo754QXsu2MS52I=
Subject key identifier:   E4:5A:58:30:07:CB:1B:D7:23:11:F1:3A:31:4B:2F:CC:0F:79:16:F0
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       0417
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          0413
Signing time:             Wed 07 Oct 2026 03:54:29 +0000
Manifest this update:     Wed 07 Oct 2026 03:54:28 +0000
Manifest next update:     Fri 09 Oct 2026 03:54:28 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: h4Z1uCAHMG0beOZE0n00sEjyoh+QcQeCShHrjzOMfCo=)
                          2: 9C225EFAE57E11F0ACCF11ADDAE4EC9C.roa (hash: 52/RrDD53hRvIOj4m0Ki2aPwgfD+p2vQH2NitGDAjtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 03:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Oct  7 03:54:28 2026 GMT
            Not After : Oct  9 03:54:28 2026 GMT
        Subject: CN=6ac5c275-286b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:8a:26:de:04:a1:fb:c0:be:de:79:af:4e:
                    8d:b1:b1:6a:ed:43:bf:3f:cf:81:75:25:fb:c0:b4:
                    92:5f:d7:22:f9:33:9c:23:09:03:ee:ba:5b:c4:30:
                    0e:0c:73:09:82:b5:d5:d3:5c:4b:35:e4:13:a6:7a:
                    4c:29:71:13:2d:e9:ae:6d:ca:b5:8f:56:a7:db:1d:
                    23:05:26:75:72:c3:e4:07:7d:04:fa:7b:15:13:a5:
                    9f:5c:a8:b3:91:fb:07:91:fe:e1:b5:bd:63:b5:df:
                    ed:e5:37:bc:fe:e8:92:1d:d7:e2:d7:17:03:75:78:
                    68:d9:a3:80:e3:cb:20:03:e7:18:f2:68:7f:f8:75:
                    a4:83:0d:de:76:bd:5a:49:20:77:a9:a4:78:f8:d7:
                    00:88:5d:98:6d:f8:e8:1e:04:6d:c4:a3:fe:63:f2:
                    0f:b6:79:e2:1b:70:9f:cb:d2:3f:f0:82:86:a3:4f:
                    a6:1d:c0:3b:d1:23:64:6b:b4:83:62:f5:09:00:32:
                    be:a2:cd:24:57:e8:7c:63:63:6d:73:fb:36:2f:df:
                    d5:85:1a:4c:9e:fd:3c:c2:a2:ab:29:c5:15:91:a9:
                    99:15:6a:bc:b1:be:2f:9a:40:c3:df:40:7c:cd:7c:
                    c0:71:04:ad:b6:33:20:be:0f:94:08:26:d9:eb:3a:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:58:30:07:CB:1B:D7:23:11:F1:3A:31:4B:2F:CC:0F:79:16:F0
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:d6:75:4b:63:43:b3:41:ab:46:34:f4:51:14:ca:79:53:
         ae:cf:34:cc:7f:19:c4:2b:49:a7:4a:60:ba:a4:ba:91:06:a9:
         b7:e2:18:12:e6:c0:b5:8e:a8:3a:21:39:63:a5:a3:ad:41:43:
         51:61:79:fb:26:a3:09:c0:ec:95:84:69:77:5c:ed:63:75:f2:
         df:e1:01:e3:11:77:b4:37:ed:51:96:35:39:de:de:e0:a2:10:
         82:10:8a:af:e1:78:b1:1c:dd:2c:7d:02:39:c4:05:f6:56:23:
         06:f6:de:4b:c7:e0:f4:96:8f:5e:bf:6b:dd:c5:9b:8a:d0:6d:
         9e:fc:c3:2f:7f:16:6f:74:2f:a7:a9:ba:19:b1:fd:74:4b:ad:
         32:0b:98:49:0a:0e:9b:7f:6b:93:3c:14:97:cc:9b:c1:a7:43:
         96:b6:37:44:47:ab:ef:f8:0e:92:91:22:a1:61:19:2b:8f:de:
         92:c1:21:a0:9b:dd:3d:a3:56:2c:bd:35:20:ba:95:ff:b1:3f:
         33:fd:18:a4:2a:a5:63:b0:bc:d0:6d:66:b5:42:e5:6c:ab:fa:
         6e:bd:10:b3:c9:43:26:34:a9:7e:8b:95:89:06:74:ee:22:a6:
         e9:f6:6c:d1:bf:2e:69:0d:af:88:6d:b8:1e:46:c3:93:7b:08:
         ca:2b:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----